Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 3 subscribers
  • Views 917 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

how to proxy server is only acepted user

eelco
Hi,
i want to let astaro only accept one ipnumer to use the firewall for dns, http and ftp. This server is a proxy, contentfilter and antivirus solution. The other ip numer will be the mailsweeper machine here to i only want 1 machine to be accepted by astaro. Currently i have the firewall configured with masq, http proxy, dns proxy and socks this works fine but the whole network can reconfigure their webclient and bypass the content filter unless the ipnr's are blocked by the firewall. Do i need to reconfigure thw whole firewall now?? I only have options to define networks not single ip numbers.

thanks ...


This thread was automatically locked due to age.
Parents
  • 0
    Hi,

    define a network with youre mimesweepers ip and set up rules mimesweeper-->desired service(s)--> allow.

    In addition, point all youre clients 2 the mimesweeper.

    cheerio,

    Ralph
  • 0 in reply to Ralph
    hi,

    just define a "network" like this: /32

    ex:
    NETWORK  my-proxy
    IP       192.168.100.5
    NETMASK  255.255.255.255

    then add rules:
    FROM       SERVICE      TO       ACTION
    my-proxy   DNS          any      allow
    my-proxy   HTTP         any      allow
    ...

    bye,
    michael
Reply
  • 0 in reply to Ralph
    hi,

    just define a "network" like this: /32

    ex:
    NETWORK  my-proxy
    IP       192.168.100.5
    NETMASK  255.255.255.255

    then add rules:
    FROM       SERVICE      TO       ACTION
    my-proxy   DNS          any      allow
    my-proxy   HTTP         any      allow
    ...

    bye,
    michael
Children
Unfiltered HTML